Product: Solaris 9 Operating System Solaris 10 Operating System Solaris 8 Operating System

A security vulnerability in the Solaris X Window System (X(5)) PCF font handler in libfont and libXfont libraries may allow a remote unprivileged user to crash the application or execute arbitrary code with the privileges of the application which dynamically links to one of these libraries. The ability to crash an application is a type of Denial of Service (DoS).

This issue is described in the following documents:

CERT VU#203220 at http://www.kb.cert.org/vuls/id/203220

CVE-2008-0006 at http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0006

State: Resolved
First released: 17-Jan-2008
Permalink | Comments [0]

Trackback URL: http://blogs.sun.com/security/entry/sun_alert_103192_a_security
Comments:

Post a Comment:

Name:
E-Mail:
URL:

Your Comment:

HTML Syntax: NOT allowed